Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b1655db6-c486-404e-a33e-9132a12eb476.roa
File:                     b1655db6-c486-404e-a33e-9132a12eb476.roa (raw, json)
Hash identifier:          qyTlTLyTpTuPkuEJfuxL9Ba2z1jyZK6dBPSAjo7VqyY=
Subject key identifier:   52:80:CA:F3:2D:72:61:D0:6B:EF:91:11:1B:B4:FD:9D:6B:92:52:67
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       54AE1992E615D9CEFCDFF441FB42E6A3BA0C237E
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b1655db6-c486-404e-a33e-9132a12eb476.roa
Signing time:             Wed 30 Jul 2025 00:30:21 +0000
ROA not before:           Wed 30 Jul 2025 00:30:21 +0000
ROA not after:            Wed 03 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dafb:10c0::/46 maxlen: 48
Validation:               Failed, certificate revoked on Wed 30 Jul 2025 18:37:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ae:19:92:e6:15:d9:ce:fc:df:f4:41:fb:42:e6:a3:ba:0c:23:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jul 30 00:30:21 2025 GMT
            Not After : Sep  3 23:59:59 2025 GMT
        Subject: serialNumber=abd763dbecc2f9ba298fc7034dd7171c8b9163d7b6e62c9c1067c3a4f5f600a4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:fe:78:1f:cb:45:ce:24:1e:22:c3:b0:a0:ab:
                    bf:c7:bf:e0:cc:96:22:99:8c:ee:70:33:3c:3d:00:
                    80:e4:da:88:40:db:92:04:5a:32:68:ea:20:40:82:
                    2e:b2:d2:b2:79:c2:d2:01:ba:30:6e:87:3c:fb:b9:
                    8e:3e:bc:fe:2a:dd:ee:b1:30:88:ac:ae:61:d3:01:
                    18:32:03:d5:91:48:30:b5:6a:da:70:7e:cd:2c:5f:
                    fd:3c:9e:da:31:ff:2e:da:b0:2b:fe:c5:b8:d0:58:
                    fd:16:b6:3b:fa:6e:af:1e:70:ee:17:13:2e:ff:9b:
                    74:77:24:70:37:e0:e0:ed:86:39:3a:41:ce:3f:b5:
                    76:1b:c1:c9:04:ab:51:61:84:e2:c0:81:b6:b4:c9:
                    90:ea:5e:6e:b8:69:29:ef:8d:2a:b7:5a:29:4a:01:
                    27:c8:bd:81:bd:60:ad:0b:4d:a5:77:52:f7:96:4c:
                    54:5a:61:0c:5b:5c:84:8a:ce:c8:1a:c1:2f:97:d0:
                    04:0a:49:60:2c:c5:0c:a6:f8:d2:a6:cd:6e:cc:d6:
                    dd:aa:2e:05:25:41:4c:18:84:0b:0f:3d:79:5c:67:
                    9d:27:f1:50:6b:f3:81:d6:71:3d:bb:67:cd:95:52:
                    c3:dd:46:c5:d1:ab:96:46:11:34:35:8b:a5:80:67:
                    6d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:80:CA:F3:2D:72:61:D0:6B:EF:91:11:1B:B4:FD:9D:6B:92:52:67
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b1655db6-c486-404e-a33e-9132a12eb476.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dafb:10c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         29:1a:1a:5b:60:fb:10:ac:58:49:fe:cd:46:1f:d2:52:08:3f:
         81:43:23:ed:33:0f:ee:96:aa:45:66:f8:39:75:de:d1:7c:b6:
         5e:bc:c7:dd:80:6e:1e:92:b0:d0:41:ea:48:31:50:e1:17:73:
         ba:f7:a3:1d:4b:ab:fd:4e:05:cb:7e:6b:11:2f:71:aa:58:f6:
         ab:d1:90:9a:d4:01:47:b9:bc:dc:86:0f:6b:22:39:eb:a7:c7:
         b5:e7:84:3f:f9:08:7a:7b:37:bf:3a:55:41:91:84:f0:01:8a:
         fd:cd:1c:5c:9a:03:cc:85:93:1d:17:a0:80:26:d6:12:c1:d6:
         6c:44:09:5e:7b:4d:31:70:c5:d5:c7:fc:46:65:ac:37:53:3b:
         68:e4:a3:e8:14:b0:23:ae:26:de:92:18:4b:9d:d4:bd:34:3d:
         6a:41:81:6f:e9:02:e0:a2:45:58:1c:2d:34:4f:08:62:49:e5:
         bf:49:d4:dc:27:d4:0d:9a:e6:5a:e7:b9:43:47:92:2d:50:9c:
         4f:50:e4:a3:73:ff:f0:46:61:ca:bd:a4:75:9c:99:34:26:43:
         f8:dd:21:95:47:be:5b:a9:fb:16:9a:44:9d:3a:fc:1a:7d:55:
         d4:d2:82:10:5a:4e:6d:a3:6c:7b:c2:a7:79:ec:5e:a9:81:be:
         10:f7:43:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----